UmutiyaXVirus3[.]2[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
UmutiyaXVirus3.2.exe
Size 387KB
Sample260708-dhefrah12t
SHA256 1c42e0488e7adf90694d0b4d86a2cb980cfb7f1158f6959991dd86081b878116
MD5 eb5f53cf6b196fc371c4c540b3fa7d89
SHA1 7fb9a9924688cd62f0be8dd957af4efb07007dc1
SHA512 86488fb7b580a9d37e4bf3c2d2a020ff084b7719ceb4c9f8b6a8f1b3a5803373e41d7badc097c86e32b7ed8f682b9dca303096ffde796f81a785e7957a00f3ee
SSDEEP 12288:805yaozcmpi9dWSLKkPLokF8KIPLokF8K:805yaYGzbYkF8K3kF8K
TLSH
T181849E1577A51CF9ED77817DC942890AEA727C5643A0EACF03A04AA71F236E05E3F712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UmutiyaXVirus3.2.exe

File Explorer

UmutiyaXVirus3.2.exe

.exe 387KB

UmutiyaXVirus3.2.exe

IMPHASH 872289c70a60d674935c3d85bdf5c156
SHA256 1c42e0488e7adf90694d0b4d86a2cb980cfb7f1158f6959991dd86081b878116
MD5 eb5f53cf6b196fc371c4c540b3fa7d89
SHA1 7fb9a9924688cd62f0be8dd957af4efb07007dc1
SHA512 86488fb7b580a9d37e4bf3c2d2a020ff084b7719ceb4c9f8b6a8f1b3a5803373e41d7badc097c86e32b7ed8f682b9dca303096ffde796f81a785e7957a00f3ee
SSDEEP 12288:805yaozcmpi9dWSLKkPLokF8KIPLokF8K:805yaYGzbYkF8K3kF8K
TLSH
T181849E1577A51CF9ED77817DC942890AEA727C5643A0EACF03A04AA71F236E05E3F712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

50344

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\umuti\Desktop\Projects\UmutiyaXVirus3.2\x64\Release\UmutiyaXVirus3.2.pdb

kernel32

GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP FreeEnvironmentStringsW FindNextFileW FindFirstFileExW FindClose ReadConsoleW ReadFile GetProcessHeap SetStdHandle HeapReAlloc HeapSize CreateFileW WriteConsoleW SetEndOfFile WinExec Process32FirstW CreateFileA Process32NextW CreateToolhelp32Snapshot OpenProcess WriteFile lstrcpyW CreateProcessW TerminateProcess lstrcmpW GetCurrentThreadId lstrlenW Sleep GetTickCount CreateEventW WaitForSingleObject GetProcAddress CloseHandle GetModuleHandleA IsValidCodePage GetCurrentProcess GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType SetFilePointerEx GetFileSizeEx EnumSystemLocalesW GetUserDefaultLCID RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead WaitForSingleObjectEx GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetLocaleInfoW IsValidLocale RtlUnwind

user32

GetSystemMetrics GetDC ReleaseDC GetAsyncKeyState InvalidateRect FillRect BlockInput LoadIconW wsprintfW DrawIconEx SetCursorPos GetCursorPos PostMessageW GetWindowRect MessageBoxW CallNextHookEx MoveWindow UnhookWindowsHookEx EnumWindows GetClassNameW SetWindowsHookExW GetWindowTextW

gdi32

CreateFontIndirectW LineTo CreatePen Rectangle SelectClipRgn ExcludeClipRect MoveToEx CreateFontW GetStockObject TextOutW GetTextExtentPoint32W SetTextColor SetBkMode PlgBlt SetBrushOrgEx BitBlt CreateCompatibleBitmap SelectObject CreateCompatibleDC PatBlt StretchBlt DeleteDC SetStretchBltMode DeleteObject CreateSolidBrush

advapi32

RegCreateKeyExA RegSetValueExA RegCloseKey

msimg32

AlphaBlend

winmm

waveOutOpen waveOutReset waveOutClose waveOutUnprepareHeader waveOutWrite waveOutPrepareHeader

Name

.text

Size

168KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

123KB

Virtual Size

123KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

UmutiyaXVirus3.2.exe

kernel32

user32

gdi32

advapi32

msimg32

winmm

generic